CVE-2015-7762

Published: Nov 6, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement (ACK) packet, which allows remote attackers to obtain sensitive information by (1) conducting a replay attack or (2) sniffing the network.

Affected (30)

Products: Openafs: Openafs · Debian: Debian Linux

1 product

1 product

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Openafs Openafs	Up to 1.6.14.1
Openafs Openafs	Version 1.7.10
Openafs Openafs	Version 1.7.11
Openafs Openafs	Version 1.7.12
Openafs Openafs	Version 1.7.13
Openafs Openafs	Version 1.7.14
Openafs Openafs	Version 1.7.15
Openafs Openafs	Version 1.7.16
Openafs Openafs	Version 1.7.17
Openafs Openafs	Version 1.7.18
Openafs Openafs	Version 1.7.19
Openafs Openafs	Version 1.7.1
Openafs Openafs	Version 1.7.20
Openafs Openafs	Version 1.7.21
Openafs Openafs	Version 1.7.22
Openafs Openafs	Version 1.7.23
Openafs Openafs	Version 1.7.24
Openafs Openafs	Version 1.7.25
Openafs Openafs	Version 1.7.26
Openafs Openafs	Version 1.7.27
Openafs Openafs	Version 1.7.28
Openafs Openafs	Version 1.7.29
Openafs Openafs	Version 1.7.2
Openafs Openafs	Version 1.7.30
Openafs Openafs	Version 1.7.31
Openafs Openafs	Version 1.7.3
Openafs Openafs	Version 1.7.4
Openafs Openafs	Version 1.7.8